pwn 0.4.502 → 0.4.503

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8e6a9cadce0579fb5fae8d210d13e9d3be8693978ed49f309f911e21d2369465
-  data.tar.gz: 25614e923ad9677ba7b281eb6efc4f1b7b5c4bd4fd7eb1d1729665c3cd8f769b
+  metadata.gz: b596bbfaab1c2c5442b6be7e46c63fa7b2d9b7c3daa370bc8cfdea68b7e0e039
+  data.tar.gz: 79137ee35bdb6a599eba227124da98567776d6dec5593f8b44681fa95f543f2f
 SHA512:
-  metadata.gz: d619efe1e91a920ae8f2155ee42627668a9c61b559352e82746a2eced1472e6d5c45304729b9efce166aa0f4e23d1707bb8485903c99c1d791dca2113480b0d4
-  data.tar.gz: 67e549838acfc45e4658e2bcccf030755a7bb9a12201f15fbd94503e1bcbdaa8dfbad333607a80780c462ba6485c698eda4ca272c873e110949466ccedc90901
+  metadata.gz: ac749d01182f84dc41213be5d947d7f5ed18d4b35397ebebffe470a9f7cbd175d42d6b3e36f20274bac7565348659ceca01fa21af66af934d1cc4a79263e745e
+  data.tar.gz: 2cd0bbfe6ab55336a62a878b8b55c503f345c46c5cb2b7648fc39761d45b08f045c3ff4426cc6f734350ce5ef03988e08b7125d5e18e89f888f43434ab864eeb

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.502]:001 >>> PWN.help
+pwn[v0.4.503]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.502]:001 >>> PWN.help
+pwn[v0.4.503]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_android_war_dialer

@@ -91,11 +91,18 @@ begin
     # Record Call
     pid_to_kill = 0
     wav_file = "#{wav_archive}/#{target_num}-#{start_timestamp}.wav"
-    sox_params = "-d #{wav_file} trim 0 #{seconds_to_record}"
 
     puts red
     puts "Recording Duration: #{seconds_to_record}s"
-    system(sox_bin, sox_params)
+    system(
+      sox_bin,
+      '-d',
+      wav_file,
+      'trim',
+      '0',
+      seconds_to_record.to_s
+    )
+
     puts 'Complete.'
     puts end_of_color
 
@@ -109,11 +116,27 @@ begin
 
     puts cayan
     puts 'Generating Audio Spectrogram...'
-    sox_params = "#{wav_file} -n spectrogram -o #{wav_file}-spectrogram.png -d #{seconds_to_record}"
-    system(sox_bin, sox_params)
+    system(
+      sox_bin,
+      wav_file,
+      '-n',
+      'spectrogram',
+      '-o',
+      "#{wav_file}-spectrogram.png",
+      '-d',
+      seconds_to_record.to_s
+    )
+
     puts 'Generating Audio Waveform...'
-    waveform_params = "-c '#FF0000' -b '#000000' -F #{wav_file} #{wav_file}-waveform.png"
-    system(waveform_bin, waveform_params)
+    system(
+      waveform_bin,
+      '-c',
+      '#FF0000',
+      '-b',
+      '#000000',
+      '-F',
+      "#{wav_file} #{wav_file}-waveform.png"
+    )
     puts 'Complete.'
     puts end_of_color
 

data/bin/pwn_arachni

@@ -117,14 +117,39 @@ begin
   end
 
   # Kick off scan as defined by pwn_arachni flags
-  system("sudo /bin/bash --login -c \"#{arachni_cmd_str}\"")
+  system(
+    'sudo',
+    '/bin/bash',
+    '--login',
+    '-c',
+    arachni_cmd_str
+  )
 
   # Report Scan Results
-  system("sudo /bin/bash --login -c \"arachni_reporter #{output_dir}/arachni_results.afr --reporter=html:outfile=#{output_dir}/arachni_results.html.zip\"")
-  system("sudo /bin/bash --login -c \"arachni_reporter #{output_dir}/arachni_results.afr --reporter=json:outfile=#{output_dir}/arachni_results.json\"")
+  system(
+    'sudo',
+    '/bin/bash',
+    '--login',
+    '-c',
+    "arachni_reporter #{output_dir}/arachni_results.afr --reporter=html:outfile=#{output_dir}/arachni_results.html.zip"
+  )
+
+  system(
+    'sudo',
+    '/bin/bash',
+    '--login',
+    '-c',
+    "arachni_reporter #{output_dir}/arachni_results.afr --reporter=json:outfile=#{output_dir}/arachni_results.json"
+  )
 
   # Unzip Results in Output Dir
-  system("sudo /bin/bash --login -c \"cd #{output_dir} && unzip -o arachni_results.html.zip\"")
+  system(
+    'sudo',
+    '/bin/bash',
+    '--login',
+    '-c',
+    "cd #{output_dir} && unzip -o arachni_results.html.zip"
+  )
 rescue StandardError, SystemExit, Interrupt => e
   raise e
 ensure

data/bin/pwn_fuzz_net_app_proto

@@ -145,5 +145,12 @@ if start_reporting_server
   end
   puts "For Scan Results Navigate to: http://127.0.0.1:#{listen_port}/pwn_fuzz_net_app_proto.html"
   simple_http_server_params = "-i #{listen_ip} -p #{listen_port}"
-  system("cd #{dir_path} && pwn_simple_http_server #{simple_http_server_params}")
+  Dir.chdir(dir_path)
+  system(
+    'pwn_simple_http_server',
+    '-i',
+    listen_ip,
+    '-p',
+    listen_port.to_s
+  )
 end

data/bin/pwn_perimeter_recon

@@ -218,7 +218,15 @@ unless nmap_path == ''
       # Eyewitness Nmap XML Results
       unless eyewitness_path == ''
         print "#{@green}Eyewitness Nmap XML Results...#{@end_of_color}"
-        system("#{eyewitness_path} -x '#{nmap_xml_results}' -d '#{output_dir}/#{nmap_target}-#{@runtime_timestamp}' --no-prompt --all-protocols")
+        system(
+          eyewitness_path,
+          '-x',
+          nmap_xml_results,
+          '-d',
+          "#{output_dir}/#{nmap_target}-#{@runtime_timestamp}",
+          '--no-prompt',
+          '--all-protocols'
+        )
       end
 
       PWN::Plugins::NmapIt.parse_xml_results(xml_file: nmap_xml_results) do |xml|

data/bin/pwn_sast

@@ -147,7 +147,7 @@ begin
 
   # Start Simple HTTP Server (If Requested)
   if start_reporting_server
-    listen_port = Random.rand(1_025..65_535)
+    listen_port = Random.rand(1_025..65_535).to_s
 
     if pwn_provider == 'docker'
       listen_ip = '0.0.0.0'
@@ -156,7 +156,14 @@ begin
     end
 
     puts "For Scan Results Navigate to: http://127.0.0.1:#{listen_port}/pwn_scan_git_source.html"
-    system("cd #{dir_path} && pwn_simple_http_server -i #{listen_ip} -p #{listen_port}")
+    Dir.chdir(dir_path)
+    system(
+      'pwn_simple_http_server',
+      '-i',
+      listen_ip,
+      '-p',
+      listen_port
+    )
   end
 rescue SystemExit, Interrupt
   puts "\nGoodbye."

data/bin/pwn_simple_http_server

@@ -35,7 +35,17 @@ else
 end
 
 begin
-  system("thin start --adapter file --address #{bind_ip} --port #{port} --threaded --debug")
+  system(
+    'thin',
+    'start',
+    '--adapter file',
+    '--address',
+    bind_ip,
+    '--port',
+    port.to_s,
+    '--threaded',
+    '--debug'
+  )
 rescue RuntimeError
   puts "WARNING: Service Already Listening on TCP #{port}..."
   port = Random.rand(1_025..65_535)

data/lib/pwn/plugins/bus_pirate.rb

@@ -8,7 +8,6 @@ module PWN
     module BusPirate
       # Supported Method Parameters::
       # PWN::Plugins::BusPirate.connect_via_screen(
-      #   screen_bin: 'optional - defaults to /usr/bin/screen'
       #   block_dev: 'optional - serial block device path (defaults to /dev/ttyUSB0)'
       # )
 
@@ -17,19 +16,19 @@ module PWN
           opts[:block_dev].to_s
         )
 
-        block_dev = '/dev/ttyUSB0' if opts[:block_dev].nil?
-
-        if opts[:screen_bin].nil?
-          screen_bin = '/usr/bin/screen'
-        else
-          screen_bin = opts[:screen_bin].to_s.strip.chomp.scrub
-        end
+        block_dev ||= '/dev/ttyUSB0'
 
+        screen_bin = '/usr/bin/screen'
         raise "ERROR: #{screen_bin} not found." unless File.exist?(screen_bin)
 
-        screen_params = "#{block_dev} 115200 8 N 1"
-        screen_cmd = "#{screen_bin} #{screen_params}"
-        system(screen_cmd)
+        system(
+          screen_bin,
+          block_dev,
+          '115200',
+          '8',
+          'N',
+          '1'
+        )
       rescue StandardError => e
         raise e
       end
@@ -120,7 +119,6 @@ module PWN
       public_class_method def self.help
         puts "USAGE:
           #{self}.connect_via_screen(
-            screen_bin: 'optional - defaults to /usr/bin/screen'
             block_dev: 'optional serial block device path (defaults to /dev/ttyUSB0)'
           )
 

data/lib/pwn/plugins/github.rb

@@ -95,7 +95,11 @@ module PWN
             next if Dir.exist?(clone_dir)
 
             print "Cloning: #{clone_uri}..."
-            system('git', 'clone', clone_uri)
+            system(
+              'git',
+              'clone',
+              clone_uri
+            )
             puts 'complete.'
           end
 

data/lib/pwn/plugins/packet.rb

@@ -1107,31 +1107,73 @@ module PWN
             my_os = PWN::Plugins::DetectOS.type
             case my_os
             when :linux
-              ipfilter = 'sudo iptables'
-              chain_action = '-C'
-              ipfilter_rule = "OUTPUT --protocol tcp --source #{pkt.ip_saddr} --destination #{pkt.ip_daddr} --destination-port #{pkt.tcp_dst} --tcp-flags RST RST -j DROP"
-
-              ipfilter_cmd = "#{ipfilter} #{chain_action} #{ipfilter_rule}"
-
-              unless system(ipfilter_cmd, out: File::NULL, err: File::NULL)
-                chain_action = '-A'
-                ipfilter_cmd = "#{ipfilter} #{chain_action} #{ipfilter_rule}"
-
+              system_resp = system(
+                'sudo',
+                'iptables',
+                '-C',
+                'OUTPUT',
+                '--protocol',
+                'tcp',
+                '--source',
+                pkt.ip_saddr,
+                '--destination',
+                pkt.ip_daddr,
+                '--destination-port',
+                pkt.tcp_dst.to_s,
+                '--tcp-flags',
+                'RST',
+                'RST',
+                '-j',
+                'DROP',
+                out: File::NULL,
+                err: File::NULL
+              )
+
+              unless system_resp
                 puts 'Preventing kernel from misbehaving when manipulating packets.'
-                puts 'Creating the following iptables rule:'
-                puts ipfilter_cmd
-                system(ipfilter_cmd)
-
-                puts "Be sure to delete iptables rule, once completed.  Here's how:"
-                chain_action = '-D'
-                ipfilter_cmd = "#{ipfilter} #{chain_action} #{ipfilter_rule}"
-                puts ipfilter_cmd
+                system(
+                  'sudo',
+                  'iptables',
+                  '-A',
+                  'OUTPUT',
+                  '--protocol',
+                  'tcp',
+                  '--source',
+                  pkt.ip_saddr,
+                  '--destination',
+                  pkt.ip_daddr,
+                  '--destination-port',
+                  pkt.tcp_dst.to_s,
+                  '--tcp-flags',
+                  'RST',
+                  'RST',
+                  '-j',
+                  'DROP'
+                )
               end
 
               pkt.recalc
               pkt.to_w(iface)
 
-              system(ipfilter, "-D #{ipfilter_rule}")
+              system(
+                'sudo',
+                'iptables',
+                '-D',
+                'OUTPUT',
+                '--protocol',
+                'tcp',
+                '--source',
+                pkt.ip_saddr,
+                '--destination',
+                pkt.ip_daddr,
+                '--destination-port',
+                pkt.tcp_dst.to_s,
+                '--tcp-flags',
+                'RST',
+                'RST',
+                '-j',
+                'DROP'
+              )
             # when :osx
             #   ipfilter = 'pfctl'
             #   ipfilter_rule = "block out proto tcp from #{pkt.ip_saddr} to #{pkt.ip_daddr} port #{pkt.tcp_dst} flags R"

data/lib/pwn/plugins/rfidler.rb

@@ -7,7 +7,6 @@ module PWN
     module RFIDler
       # Supported Method Parameters::
       # PWN::Plugins::RFIDler.connect_via_screen(
-      #   screen_bin: 'optional - defaults to /usr/bin/screen'
       #   block_dev: 'optional - serial block device path (defaults to /dev/ttyUSB0)'
       # )
 
@@ -17,18 +16,18 @@ module PWN
         )
 
         block_dev = '/dev/ttyUSB0' if opts[:block_dev].nil?
-
-        if opts[:screen_bin].nil?
-          screen_bin = '/usr/bin/screen'
-        else
-          screen_bin = opts[:screen_bin].to_s.strip.chomp.scrub
-        end
+        screen_bin = '/usr/bin/screen'
 
         raise "ERROR: #{screen_bin} not found." unless File.exist?(screen_bin)
 
-        screen_params = "#{block_dev} 9600 8 N 1"
-        screen_cmd = "#{screen_bin} #{screen_params}"
-        system(screen_cmd)
+        system(
+          screen_bin,
+          block_dev,
+          '9600',
+          '8',
+          'N',
+          '1'
+        )
       rescue StandardError => e
         raise e
       end
@@ -46,7 +45,6 @@ module PWN
       public_class_method def self.help
         puts "USAGE:
           #{self}.connect_via_screen(
-            screen_bin: 'optional - defaults to /usr/bin/screen'
             block_dev: 'optional serial block device path (defaults to /dev/ttyUSB0)'
           )
 

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.502'
+  VERSION = '0.4.503'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.502
+  version: 0.4.503
 platform: ruby
 authors:
 - 0day Inc.